Develop a comprehensive process to ensure that complaints received by HUD’s Multifamily Housing Clearinghouse are resolved in a timely manner.

Status

In October 2023, the Office of Multifamily Housing reported that it had sought funding for system enhancements to coordinate tenant complaints. HUD is transitioning the Multifamily Clearinghouse responsibilities to the Federal Housing Administration (FHA) Resource Center. The FHA Resource Center has a system that will allow tracking and monitoring of customer calls. As of November 2024, the Office of Multifamily Housing requested the closure of this recommendation because it did not receive the requested funding for system enhancements, and its alternative action of using the FHA Resource Center to track and monitor customer calls did not work. As of January 2025, the Office of Multifamily plans to propose a revised management decision to HUD OIG with alternative actions to address the recommendation.

Analysis

To fully address this recommendation, HUD needs to develop a comprehensive process to ensure that complaints received by HUD are resolved in a timely manner.

Implementation of this recommendation will result in a timelier resolution of complaints submitted by those living in multifamily member housing units.

Develop agencywide policies and procedures for the intake, monitoring, and tracking of health and safety complaints.

Status

In October 2023, HUD stated that it will develop policies and procedures for Multifamily properties for the intake, monitoring, and tracking of health and safety complaints it receives. The Office of Multifamily Housing has not yet updated its policies and procedures. With no comprehensive, automated, real-time system in place, there was no direction to give the field staff, Multifamily Clearinghouse, or the Performance Based Contract Administrators other than what they were already doing. HUD was in the process of developing an automated monitoring system in the FHA resource center to allow tracking of individual calls and the call’s subject, such as health and safety. HUD missed the final action target date of December 31, 2022, and a new completion goal was set for February 2025. As of November 2024, the Office of Multifamily Housing requested the closure of this recommendation because it did not receive the requested funding for system enhancements, and its alternative action of using the FHA Resource Center to track and monitor customer calls did not work. As of January 2025, the Office of Multifamily plans to submit a revised management decision to HUD OIG with alternative actions to address the recommendation.

Analysis

To fully address this recommendation, HUD must provide evidence that it has developed and implemented policies and procedures for the Multifamily properties for the intake, monitoring, and tracking of health and safety complaints it receives when using the FHA’s automated monitoring system.

Implementation of this recommendation will result in HUD having a more efficient process for taking in, monitoring, and tracking health and safety complaints and aid HUD in more efficiently addressing those complaints.

Implement a software asset management capability for software and operating systems to ensure that software executes only from the authorized software inventory and all unauthorized software is blocked from executing on HUD's network.

Status

In April 2024, the Office of the Chief Information Officer reported that it was in the process of implementing a software management tool that would allow it to control which software is authorized to access the network. This is the first step to creating rules for allowing only authorized software to be used through HUD's endpoint security software. The final implementation of this new tool is expected by Quarter 2 of FY 2025.

Analysis

To fully address this recommendation, HUD must provide evidence that it has an automated whitelist and it is implemented as per the NIST Special Publication 800-167 or accept the risk and document mitigating measures via a Risk-Based Decision memorandum.

Implementation of this recommendation will result in HUD having the capability to ensure only authorized software is used on HUD’s network based on its software asset listing.

Implement multifactor authentication mechanisms for all nonprivileged users who access information systems that process, store, or transmit PII.

Status

The Office of the Chief Information Officer reported that it has implemented a new software security solution to implement multifactor authentication, starting with a pilot on 15 FHA systems. In October 2024, HUD received additional funds through the Technology Modernization Fund for this project enterprisewide.

Analysis

To fully address the recommendation, HUD must implement multifactor authentication enterprisewide.

Implementation of this recommendation will result in an enterprise-wide identity and access management solution. Users will be required to use multifactor authentication methods to access HUD data, networks, and devices.

Implement multifactor authentication mechanisms for all privileged users who access information systems that process, store, or transmit PII.

Status

The Office of the Chief Information Officer reported that it has implemented a new software security solution to implement multifactor authentication, starting with a pilot on 15 FHA systems. In October 2024, HUD received additional funds through the Technology Modernization Fund for this project enterprisewide.

Analysis

To fully address this recommendation, HUD must implement the eICAM plan it developed with the funding it received.

Implementation of this recommendation will result in an enterprise-wide identity and access management solution. Users will be required to use multifactor authentication methods to access HUD data, networks, and devices.

Develop and implement an action plan that includes sufficient policies, procedures, and controls that address households living in multifamily housing units having a sufficient supply of safe drinking water […]

Status

In April 2022, HUD created draft standard operating procedures to address lead in the water of its multifamily housing units. On May 11, 2023, HUD published its National Standards for the Physical Inspection of Real Estate (NSPIRE) regulations that addressed lead in the water. Further, on June 30, 2023, HUD published its Implementation of National Standards for the Physical Inspection of Real Estate Administrative Procedures, which requires property owners and agents to provide information about water supply providers and water safety alerts, if applicable, prior to the commencement of a Real Estate Assessment Center (REAC) inspection. As a result, the Office of Multifamily Housing is revising its procedures and consulting with the Office of Lead Hazard Control and Healthy Homes (OLHCHH). As of February 2025, the OIG was waiting for additional information from the Office of Multifamily Housing demonstrating whether it has addressed the recommendation.

Analysis

To fully address this recommendation, the Office of Multifamily Housing must provide evidence of an action plan that includes its procedures that address households living in multifamily units to ensure that they have a sufficient supply of safe drinking water.

Implementation of this recommendation will enable HUD to have sufficient oversight and control activities in place to ensure households living in multifamily housing have a sufficient supply of safe drinking water.

Require lenders to obtain the borrowers’ consent to verify the existence of delinquent Federal taxes with the IRS during loan origination and deny any applicant with delinquent Federal tax debt and no payment plan or a noncompliant payment plan or an applicant refusing to provide consent from receiving FHA insurance to put at least $6.1 billion to better use by avoiding potential future costs to the FHA insurance fund.

Status

The Office of Single Family Housing will need additional tax information to complete the planned action. In July 2024, Single Family Housing proposed closing the recommendation with no action because the primary action discussed would require Congressional authorization, and another option discussed would place an undue burden on borrowers and lenders and was not practical. OIG disagreed with the request. Single Family maintains that without an automated solution from the Internal Revenue Service (IRS), it is not practical for individual borrowers and/or lenders to manually check tax status with the IRS. However, OIG’s position is that action is required since delinquent tax debtors are ineligible for FHA loans under existing FHA and Office of Management and Budget (OMB) guidelines.

Analysis

To fully address this recommendation, HUD will need to provide evidence that it established a method of borrower consent to verify the existence of delinquent federal taxes.

Implementation of this rule should result in HUD putting $6.1 billion to better use.

Implement a change to regulations at 24 CFR Part 203 to require curtailment of preforeclosure interest and other costs that are caused by lender servicing delays, resulting in $413,513,975 in funds to be put to better use. This should include updating or seeking statutory authority to update HUD’s regulations as necessary and coordinating with HUD’s Office of Finance and Budget, well before any changes go through departmental clearance, to ensure that planned curtailment requirements can be consistently enforced through the claims process.

Status

FHA reported that the audit recommendation cannot be closed without the publication of the FHA Maximum Claim Rule. The proposed changes have been on HUD’s regulatory agenda since Spring 2020 but, as of February 2025, the Office of Single Family Housing does not have an estimated publication date.

Analysis

To fully address this recommendation, HUD must provide evidence that it has published and adopted the rule.

Implementation of this rule should result in HUD putting $413 million to better use.

Develop a method for using the Do Not Pay portal during the underwriting process to identify delinquent child support and delinquent Federal debt to prevent future FHA loans to ineligible borrowers to put $1.9 billion to better use.

Status

The Office of Housing has approved prioritization of funding for Integration between the Treasury’s Do Not Pay portal and HUD’s Computerized Homes Underwriting Reporting System (CHUMS). Funding was allocated to the CHUMS IT contractor on January 26, 2024, to integrate Treasury’s Do Not Pay system with CHUMS, and the IT development project was kicked off the week of February 5, 2024. As of February 2025, the Office of Single Family Housing reported that it is in the process of completing the necessary documentation and systems connection with the Do Not Pay portal. Single Family plans to submit an update on the system interface project or request another extension in March 2025.

Analysis

To fully address this recommendation, HUD must provide evidence that it has implemented applicant screening against the Do Not Pay portal to identify delinquent child support and delinquent federal debt to prevent future FHA loans from going to ineligible borrowers.

Implementation of this rule should result in HUD putting $1.9 billion to better use.

Issue a change to regulations at 24 CFR Part 203, which would avoid unnecessary costs to the FHA insurance fund, allowing an estimated $2.23 billion to be put to better use. These changes include (1) a maximum period for filing insurance claims and (2) disallowance of expenses incurred beyond established timeframes.

Status

The Federal Housing Administration (FHA) reported that the recommendation cannot be closed out without the publication of the FHA Maximum Claim Rule. The proposed changes have been on HUD’s regulatory agenda since Spring 2020 but, as of February 2025, the Office of Single Family Housing does not have an estimated publication date.

Analysis

To fully address this recommendation, HUD must publish the FHA Maximum Claim Rule. Implementation of this rule should result in HUD putting $2.23 billion to better use.

Update selection rules for CAIVRS to provide for complete reporting of all ineligible borrowers to put $9.5 million to better use.

Status

In 2020, HUD suspended reporting delinquencies and defaults to the Credit Alert Verification Reporting System (CAIVRS) because these debts are owed to the lender and are not delinquent Federal debt. A debt is not delinquent until a payment is past due to HUD for a deficiency judgment against the borrower in connection with an FHA claim. Rather than add the missing borrowers to CAIVRS, HUD determined it would remove default and claim data from the system and use it to exclusively identify borrowers with delinquent Federal debt. This will resolve the issue of incomplete reporting of delinquent federal debts greater than 3 years old. As of early June 2024, the Office of Single Family Housing stated that it was on target to complete its action plan by June 28, 2024.

Analysis

To fully address this recommendation, HUD must provide evidence that it removed default and claim data from CAIVRS.

Implementation of this recommendation should result in HUD putting $9.5 million to better use.